1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
|
'use strict';
'require form';
'require view';
return view.extend({
render: function (result) {
let m, s, o;
m = new form.Map('ipsec', _('General connections configurations'),
_('On this page, you can configure the general settings for IPsec connections.'));
m.tabbed = true;
// Shunt Configuration
s = m.section(form.GridSection, 'shunt', _('Shunt'),
_('Define Shunt pass/drop policies independent of remote connections.'));
s.addremove = true;
s.nodescriptions = true;
s.anonymous = true;
o = s.option(form.Flag, 'enabled', _('Enabled'),
_('Configuration is enabled or not'));
o.rmempty = false;
o = s.option(form.ListValue, 'mode', _('Mode'),
_('Shunt policy mode'));
o.value('pass', _('Pass'));
o.value('drop', _('Drop'));
o.rmempty = false;
o = s.option(form.DynamicList, 'local_ts', _('Local Traffic Selectors'),
_('Local traffic selectors for the shunt policy'));
o.datatype = 'list(or(cidr,ipaddr))';
o = s.option(form.DynamicList, 'remote_ts', _('Remote Traffic Selectors'),
_('Remote traffic selectors for the shunt policy'));
o.datatype = 'list(or(cidr,ipaddr))';
o = s.option(form.Value, 'priority', _('Priority'),
_('Priority of the shunt policy (lower number means higher priority)'));
o.datatype = 'uinteger';
o.modalonly = true;
o = s.option(form.Value, 'interface', _('Interface'),
_('Network interface to bind the shunt policy to'));
o.modalonly = true;
// Authority Configuration
s = m.section(form.GridSection, 'authority', _('Authority'),
_('Define Certificate Authorities that are trusted to sign and revoke peer certificates.'));
s.addremove = true;
s.nodescriptions = true;
s.anonymous = true;
o = s.option(form.Value, 'description', _('Description'),
_('An optional description of what this authority is used for.'));
o = s.option(form.Value, 'cacert', _('CA Certificate'),
_('CA certificate to use as trust anchor, relative to /etc/swanctl/x509ca.'));
o.datatype = 'file';
o = s.option(form.Value, 'cert_uri_base', _('Certificate Base URI'),
_('Base URI for the hash and URL feature to fetch certificates from the trusted CAs.'));
o.modalonly = true;
o = s.option(form.DynamicList, 'crl_uri', _('CRL URIs'),
_('URIs where a CRL for the CA can be fetched.'));
o.modalonly = true;
o = s.option(form.DynamicList, 'ocsp_uri', _('OCSP URIs'),
_('URIs where an OCSP responder for the CA is available.'));
o.modalonly = true;
// Secrets Configuration
s = m.section(form.GridSection, 'secret', _('Secrets'),
_('Define shared secrets and private key passphrases used for authentication.'));
s.addremove = true;
s.nodescriptions = true;
s.anonymous = true;
o = s.option(form.Value, 'description', _('Description'),
_('An optional description of what this secret is used for.'));
o = s.option(form.ListValue, 'type', _('Type'),
_('Kind of secret to define'));
o.rmempty = false;
o.default = 'ike';
o.value('eap');
o.value('xauth');
o.value('ntlm');
o.value('ike');
o.value('ppk');
o.value('private');
o.value('rsa');
o.value('ecdsa');
o.value('pkcs8');
o.value('pkcs12');
o.value('token');
o = s.option(form.DynamicList, 'id', _('Identity'),
_('Identities this secret is valid for'));
o.depends('type', 'eap');
o.depends('type', 'xauth');
o.depends('type', 'ntlm');
o.depends('type', 'ike');
o.depends('type', 'ppk');
o = s.option(form.Value, 'secret', _('Secret'),
_('Shared secret for authentication, or passphrase to decrypt a private key.'));
o.datatype = 'string';
o.password = true;
o.depends('type', 'eap');
o.depends('type', 'xauth');
o.depends('type', 'ntlm');
o.depends('type', 'ike');
o.depends('type', 'ppk');
o.depends('type', 'private');
o.depends('type', 'rsa');
o.depends('type', 'ecdsa');
o.depends('type', 'pkcs8');
o.depends('type', 'pkcs12');
o.modalonly = true;
o = s.option(form.Value, 'file', _('Key File'),
_('Path to the private key file.'));
o.datatype = 'file';
o.depends('type', 'private');
o.depends('type', 'rsa');
o.depends('type', 'ecdsa');
o.depends('type', 'pkcs8');
o.depends('type', 'pkcs12');
o = s.option(form.Value, 'handle', _('Handle'),
_('Handle of the private key on the smartcard.'));
o.depends('type', 'token');
o.modalonly = true;
o = s.option(form.Value, 'slot', _('Slot'),
_('Slot of the smartcard to use.'));
o.depends('type', 'token');
o.modalonly = true;
o = s.option(form.Value, 'module', _('Module'),
_('PKCS#11 module to use.'));
o.depends('type', 'token');
o.modalonly = true;
o = s.option(form.Value, 'pin', _('PIN'),
_('PIN to access the private key on the smartcard.'));
o.datatype = 'string';
o.password = true;
o.depends('type', 'token');
o.modalonly = true;
return m.render();
}
});
|
